chore: sync workflow templates

[stranske]

Sync Summary

Files Updated

• agents-weekly-metrics.yml: Weekly metrics - aggregates auto-pilot, keepalive, autofix and verifier metrics into summary reports
• bot_comment_auth_coverage.js: Warning-only bot-comment App auth coverage preflight

Files Skipped

• pr-00-gate.yml: File exists and sync_mode is create_only
• ci.yml: File exists and sync_mode is create_only
• dependabot.yml: File exists and sync_mode is create_only
• llm_slots.json: None

---

Review Checklist

• CI passes with updated workflows
• No repo-specific customizations were overwritten

Source: stranske/Workflows
Manifest: .github/sync-manifest.yml

[stranske-automation-bot]

⚠️ Action Required: Unable to determine source issue for PR #891. The PR title, branch name, or body must contain the issue number (e.g. #123, branch: issue-123, or the hidden marker ).

[stranske-keepalive]

🤖 Keepalive Loop Status

PR #891 | Agent: Codex | Iteration 0/5

Current State

Metric	Value
Iteration progress	[----------] 0/5
Action	wait (missing-agent-label)
Disposition	skipped (transient)
Gate	success
Tasks	0/6 complete
Timeout	45 min (default)
Timeout usage	6m elapsed (13%, 39m remaining)
Keepalive	❌ disabled
Autofix	❌ disabled

🔍 Failure Classification

| Error type | infrastructure |
| Error category | resource |
| Suggested recovery | Confirm the referenced resource exists (repo, PR, branch, workflow, or file). |

[stranske-keepalive]

Keepalive Work Log (click to expand)

#	Time (UTC)	Agent	Action	Result	Files	Tasks	Progress	Commit	Gate
0	2026-04-25 20:22:53	Codex	wait (missing-agent-label-transient)	skipped	—	0	0/6	—	—
0	2026-04-25 20:24:54	Codex	wait (missing-agent-label-transient)	skipped	—	0	0/6	—	cancelled
0	2026-04-25 20:27:03	Codex	wait (missing-agent-label-transient)	skipped	—	0	0/6	—	success

[Copilot]

Pull request overview

Syncs workflow templates from stranske/Workflows, updating the weekly metrics workflow and the bot-comment auth coverage preflight script.

Changes:

• Replace ad-hoc npm dependency install in the weekly metrics workflow with an explicit Node setup step + shared setup-api-client action.
• Extend weekly metrics bot-comment auth preflight configuration (adds wrapper allowed auth modes env).
• Improve robustness and reporting in .github/scripts/bot_comment_auth_coverage.js (artifact filtering, error accounting, clearer summaries, refined enforcement behavior).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/agents-weekly-metrics.yml	Adds actions/setup-node, passes new env for wrapper allowed auth modes, and improves the hard-block error annotation.
.github/scripts/bot_comment_auth_coverage.js	Tightens artifact file selection, adds read/non-auth accounting, refactors per-component policy override handling, and improves summary/enforcement logic.

[stranske]

Superseded by newer Workflows sync PR #920 (sync/workflows-daec38e5dbf4). Closing this duplicate sync lane so review and verification can focus on the latest template hash.